Securing socket communications

[Sharon]

Hi all.
How can i secure socket communications?
Is it possible to use ssl?
Thanks,
Sharon.

 

[=?iso-8859-1?Q?Patrik=20L=f6wendahl=20[C#=20MVP]?=]

Hello Sharon,

AFIK SSL is limited to HTTP communication, although on an infrastructure
level you could look at IPSec.

 

[David Hernandez Diez]

If you are using .NET Remoting you could use an HTTP Channel and benefit
from the IIS security. You will get "out of the box" security, the
drawbacks are that you will need to istall IIS and host the remote
objects in ASP.NET of course the there is always a drawback: performance.


Here is an article about .net remoting security:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch11.asp

 

[Sharon]

Thanks for your reply David.
This means that with every installation of my server, i will have to install
IIS,
and possibly a certificate.
I guess i can use IIS only in the login phase, and send back a secret key,
which
will be used to encrypt further socket communications.
But i will use this option only as a last resort.
Regards,
Sharon.

 

[Markus Stoeger]

Hello Sharon,

AFIK SSL is limited to HTTP communication, although on an infrastructure
level you could look at IPSec.

SSL is not limited to HTTP communication, it can be used with anything
that runs over TCP.

The OpenSSL page links to a page where openssl binaries for windows can
be downloaded: http://www.openssl.org/related/binaries.html
I can't find any official OpenSSL libs for .NET. I guess it should be
easy to write a .NET wrapper around that though. Someone on codeproject
seems to have done that already:
http://www.codeproject.com/managedcpp/sslclasses.asp

Strange that there aren't any official/trustworthy .NET wrappers for
openssl yet.

hth,
Max

 

[Nicholas Paldino [.NET/C# MVP]]

It should be noted that in .NET 2.0, you can use the SslStream class to
perform SSL communications.

 

[Nicholas Paldino [.NET/C# MVP]]

This won't work, since you can not decouple a good deal of the
infrastructure of ASP/ASP.NET from IIS.

In .NET 2.0, you should take a look at the SslStream class, as it will
do what you are looking for.

Hope this helps.

 

[Jay R. Wren]

This won't work, since you can not decouple a good deal of the
infrastructure of ASP/ASP.NET from IIS.

In .NET 2.0, you should take a look at the SslStream class, as it will
do what you are looking for.

Hope this helps.

I'm not sure about all of ASP.NET, but Web Services can be hosted
outside of IIS using pure .NET.

http://msdn.microsoft.com/msdnmag/issues/04/12/ServiceStation/

Coupled with SslStream, you may be able to run your own https:// web
service.

 

[Sharon]

Hosting a web service could work.
I'm also looking into HttpListener class.
Thanks.